$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa File: 4200f42a-72f5-310d-bd4e-143e66d1251c.roa (raw, json) Hash identifier: sfLmqDsbIo6nXOBkAF5VsDfZD91P8joe2NUTvywgHco= Subject key identifier: F1:DF:0C:57:EB:1F:13:B3:88:92:76:FD:08:A8:90:98:C0:3D:E9:37 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A345FF2EC05038BB6F95380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3356 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5f:f2:ec:05:03:8b:b6:f9:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=36ece93b-96b3-475b-b0fe-d450745b2911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:5b:e8:74:97:46:ec:09:8c:36:88:4a:50: 6f:32:ea:85:2a:2c:76:b6:21:36:b8:5c:2d:ae:e3: d5:17:12:1b:7a:0e:8f:14:85:51:fa:28:f9:8f:ee: ce:ae:75:3a:5e:4a:e9:e9:11:18:3b:cb:3f:1f:c3: 60:a7:f2:c8:bc:3b:94:6a:d9:c9:97:5c:fb:08:fe: 7d:78:7a:d1:5d:44:98:0f:37:dd:61:64:5a:d0:a4: 83:38:35:39:a0:b3:4d:9a:4c:2b:14:60:5f:7a:6e: f1:8d:7b:3b:7d:ff:f4:b4:67:0a:5d:c9:48:88:5c: ae:24:f2:36:c6:b0:b4:c6:1e:a1:98:c9:4d:41:6e: 56:ae:d2:3b:6e:10:6c:97:09:c5:e1:d3:ab:29:64: fe:fb:d7:c0:40:59:54:34:65:ff:90:c6:14:f7:76: 51:70:27:bc:90:db:fd:c0:3e:ac:3a:69:54:56:b6: c0:16:6a:00:d0:12:fa:44:56:d5:d2:30:66:18:5e: 7c:ff:6e:38:0e:e4:65:a4:c4:f4:5e:ae:39:20:5d: 2c:00:24:f9:9b:95:06:f6:bb:f5:ef:0e:c0:a1:2b: a3:ad:c2:9c:2e:18:eb:f3:1a:ef:66:8c:7f:6a:e6: 8c:c7:ff:9d:f9:57:d7:70:0e:4d:07:7c:b4:c5:5b: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:0C:57:EB:1F:13:B3:88:92:76:FD:08:A8:90:98:C0:3D:E9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f7:34:0d:6e:cc:00:31:39:ee:88:57:62:24:39:95:79:ac: 52:69:bf:19:c1:b6:cb:c2:a1:ac:1d:b6:b6:6b:35:e6:53:df: 8e:d4:7f:c5:1b:7a:72:ac:10:fd:23:a5:d6:61:08:fe:e1:22: 86:ca:91:2b:dd:fa:e9:83:f6:de:90:f8:6c:99:1e:6f:96:a0: 2f:c8:15:cd:3f:15:ea:88:7a:d2:24:cc:1f:1b:dc:30:24:f8: 90:40:cc:ae:cd:fb:71:d2:01:9a:8a:8b:4b:64:cf:d8:16:7e: fc:18:81:f7:8c:be:95:4d:2b:a5:55:1a:f7:17:8d:f5:1d:ac: 6a:e6:51:57:5a:1b:0c:47:da:c0:2a:39:b1:f8:6f:b2:27:93: db:ae:1d:67:e4:3b:62:6c:79:f4:72:9f:0f:8b:6f:ff:96:4b: b6:f5:20:0d:60:36:52:f3:82:a2:f9:a4:c3:2f:1d:0d:e8:64: c2:e5:d6:f5:da:9a:5c:30:64:8e:ae:cd:f0:dd:60:de:62:73: 45:f4:52:0c:e7:26:6f:fe:e7:66:5c:0e:6e:d4:df:69:22:60: 7e:c6:d9:f3:a0:d4:cb:4e:c8:ef:de:13:79:1e:73:63:d2:64: ba:76:65:ba:00:88:d8:84:32:44:78:99:6a:c4:18:20:13:7c: 0e:5b:6e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF/y7AUDi7b5U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk MzZlY2U5M2ItOTZiMy00NzViLWIwZmUtZDQ1MDc0NWIyOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmedb6HSXRuwJjDaISlBvMuqFKix2tiE2uFwt ruPVFxIbeg6PFIVR+ij5j+7OrnU6Xkrp6REYO8s/H8Ngp/LIvDuUatnJl1z7CP59 eHrRXUSYDzfdYWRa0KSDODU5oLNNmkwrFGBfem7xjXs7ff/0tGcKXclIiFyuJPI2 xrC0xh6hmMlNQW5WrtI7bhBslwnF4dOrKWT++9fAQFlUNGX/kMYU93ZRcCe8kNv9 wD6sOmlUVrbAFmoA0BL6RFbV0jBmGF58/244DuRlpMT0Xq45IF0sACT5m5UG9rv1 7w7AoSujrcKcLhjr8xrvZox/auaMx/+d+VfXcA5NB3y0xVuGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHfDFfrHxOziJJ2/QiokJjAPek3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDIwMGY0MmEtNzJmNS0z MTBkLWJkNGUtMTQzZTY2ZDEyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP3NA1uzAAxOe6IV2IkOZV5rFJpvxnBtsvCoawdtrZrNeZT347Uf8Ub enKsEP0jpdZhCP7hIobKkSvd+umD9t6Q+GyZHm+WoC/IFc0/FeqIetIkzB8b3DAk +JBAzK7N+3HSAZqKi0tkz9gWfvwYgfeMvpVNK6VVGvcXjfUdrGrmUVdaGwxH2sAq ObH4b7Ink9uuHWfkO2JsefRynw+Lb/+WS7b1IA1gNlLzgqL5pMMvHQ3oZMLl1vXa mlwwZI6uzfDdYN5ic0X0UgznJm/+52ZcDm7U32kiYH7G2fOg1MtOyO/eE3kec2PS ZLp2ZboAiNiEMkR4mWrEGCATfA5bbvA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:50 2025 by rpki-client